General
- Target 2026-09-16_0a9b27e9df15c7ba75a66b9ee152c6ec_elex_wannacry
- Size 151KB
- Sample260916-rtms6a1gmg
- SHA256 ced0a7cdc24369a29b9da298bc548555fe925547ecac696a4017e86b2ad32efe
- MD5 0a9b27e9df15c7ba75a66b9ee152c6ec
- SHA1 4ca40894ce93e6387081cfc455a5a55bd68245b9
- SHA512 b89fa0bf57ca11e0d5486490d6cd8c22522eaaac95979ae7a376844932fe860f024afa91105c6dc3d2ee7fd42839496e9f884717e55b72b7bff59e9b6b090b23
- SSDEEP 3072:LLy2Kerc64CiGIm6CjPloaK6Or1kz36Rq4QqjYCr6KNe2aKd/EAGzYMzhq9BMUOh:LLy2Kwc64YIridmrNPyEe2Xd/EPYQsOh
- TLSH T190E36C06A14780F2DC6700B06689ABFF8A359E358421D9E6E798FC5DED739D1A72C307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-16_0a9b27e9df15c7ba75a66b9ee152c6ec_elex_wannacry.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_0a9b27e9df15c7ba75a66b9ee152c6ec_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_0a9b27e9df15c7ba75a66b9ee152c6ec_elex_wannacry
- Size 151KB
- SHA256 ced0a7cdc24369a29b9da298bc548555fe925547ecac696a4017e86b2ad32efe
- MD5 0a9b27e9df15c7ba75a66b9ee152c6ec
- SHA1 4ca40894ce93e6387081cfc455a5a55bd68245b9
- SHA512 b89fa0bf57ca11e0d5486490d6cd8c22522eaaac95979ae7a376844932fe860f024afa91105c6dc3d2ee7fd42839496e9f884717e55b72b7bff59e9b6b090b23
- SSDEEP 3072:LLy2Kerc64CiGIm6CjPloaK6Or1kz36Rq4QqjYCr6KNe2aKd/EAGzYMzhq9BMUOh:LLy2Kwc64YIridmrNPyEe2Xd/EPYQsOh
- TLSH T190E36C06A14780F2DC6700B06689ABFF8A359E358421D9E6E798FC5DED739D1A72C307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Juko
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1